Parse Duration Project: Security Vulnerabilities
An issue was discovered in the parse_duration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service (CPU and memory consumption) via a duration string with a large exponent.
CVSS Score
7.5
EPSS Score
0.004
Published
2021-04-01